This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json) Hash identifier: cgxDdRTYohpl5evnTmLpJyq2J5uvVdsZiGvT4FaJPDk= Subject key identifier: FC:16:3C:BA:A8:7A:8B:A2:30:06:1A:32:45:43:7B:3E:CC:52:67:0F Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft Manifest number: 71 Signing time: Thu 01 Jan 2026 06:25:15 +0000 Manifest this update: Thu 01 Jan 2026 06:25:14 +0000 Manifest next update: Thu 08 Jan 2026 06:25:14 +0000 Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: fphDjgtSGwVxto8+YsPRNnVyLcAIdbCuSj0bRR0V5JM=) 2: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: YUDZaJzqTJAMIH2aYnffmm6rXB/hTcHYJMvuVkjpDWs=) 3: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: WQ8BuE65YXtQyTIurkyDNftfUcfnYZp85uvlHfPR7PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 06:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Validity Not Before: Jan 1 06:25:14 2026 GMT Not After : Jan 8 06:25:14 2026 GMT Subject: CN=6956134b-e63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:05:3a:01:87:30:80:dd:12:43:e3:d7:4a: 53:11:14:b0:05:0a:e3:9e:a1:8b:94:87:bd:31:5d: b1:5f:db:f4:3b:6e:d6:c2:c3:b0:78:cd:de:85:44: b0:aa:40:22:90:d4:f9:1d:e1:e2:ab:0c:bf:57:a1: 40:57:14:55:b3:27:9e:b2:eb:a3:94:64:d7:e8:fb: 36:f0:d8:cb:93:a4:2e:75:9c:9a:1a:16:98:e6:14: 38:8b:c0:57:ef:1b:29:c5:5f:ce:82:9f:43:73:5e: 5b:a4:a7:80:91:23:12:17:ad:7d:d3:23:4d:9b:11: e7:0c:17:f6:06:7f:20:fa:2d:bc:15:de:e4:46:4c: 9a:17:8e:2d:8b:d4:5f:37:ff:99:1b:be:31:b8:06: 4a:5f:c4:18:1e:bf:f8:44:48:1c:36:db:9e:12:2c: 76:64:0b:12:f0:d2:83:60:5b:c8:73:08:f6:d1:48: 12:ed:c8:30:ec:ec:59:09:fa:1b:5e:c3:79:24:88: a9:14:b7:7c:90:02:66:0e:17:f7:a5:01:0f:0a:8f: e1:5a:b9:9f:d0:1c:01:db:97:9b:66:3a:1a:9c:a6: f4:2b:3e:b8:a9:3f:e0:42:ca:0e:2e:31:fb:44:d7: 36:f7:98:dd:eb:ef:20:e5:6d:af:01:4c:e2:26:2b: 8e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:16:3C:BA:A8:7A:8B:A2:30:06:1A:32:45:43:7B:3E:CC:52:67:0F X509v3 Authority Key Identifier: keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:7f:af:d3:90:c1:58:7c:e2:42:a6:3c:a7:8e:ab:30:c8:43: 37:df:c9:f0:84:73:e2:2e:92:4d:88:c6:df:6f:f5:db:21:70: 09:c9:fb:9c:4e:05:4a:9a:7e:85:3e:bc:1d:34:f9:dc:fc:1e: 09:5a:d1:c1:15:8c:0e:51:c1:ad:fc:ba:74:8c:05:ba:c2:7b: 50:d2:74:c3:c7:61:70:e5:3b:42:44:38:67:02:c3:f4:85:3b: cd:bf:53:a2:8b:46:26:60:eb:6a:93:9e:ea:15:7c:76:a6:5a: b1:6a:bc:a1:ab:af:3c:d5:c6:23:49:57:a5:94:d2:7d:ed:19: 0a:c5:30:81:8a:eb:89:e5:3e:96:a3:ad:09:63:ca:7c:20:8e: 56:d2:3c:8e:68:a7:14:30:f5:d4:b9:1c:a0:bc:75:f0:ca:60: f0:6d:54:d4:f1:61:e4:ec:2c:bc:b9:ea:73:d8:6a:34:7e:19: 9c:89:b0:b7:9c:5f:49:7c:95:63:d6:8b:db:80:c4:05:e8:67: e4:41:6c:48:b5:79:66:8f:41:41:bd:4d:a8:48:3d:35:1d:48: e3:96:d7:03:8e:f2:e0:9a:a7:78:6a:fb:52:4a:02:5a:79:aa: 45:a2:cc:54:b6:78:43:be:a0:69:a7:ae:90:71:3a:33:c8:96: cf:eb:f6:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDMwOTExMC8GA1UEBRMoMDc3QkNENjYzQjBFNjNCREY1RTlCODA5QUY3MUFFRjFF NUFERjYzQjAeFw0yNjAxMDEwNjI1MTRaFw0yNjAxMDgwNjI1MTRaMBgxFjAUBgNV BAMMDTY5NTYxMzRiLWU2M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKpwU6AYcwgN0SQ+PXSlMRFLAFCuOeoYuUh70xXbFf2/Q7btbCw7B4zd6FRLCq QCKQ1Pkd4eKrDL9XoUBXFFWzJ56y66OUZNfo+zbw2MuTpC51nJoaFpjmFDiLwFfv GynFX86Cn0NzXlukp4CRIxIXrX3TI02bEecMF/YGfyD6LbwV3uRGTJoXji2L1F83 /5kbvjG4BkpfxBgev/hESBw2254SLHZkCxLw0oNgW8hzCPbRSBLtyDDs7FkJ+hte w3kkiKkUt3yQAmYOF/elAQ8Kj+FauZ/QHAHbl5tmOhqcpvQrPripP+BCyg4uMftE 1zb3mN3r7yDlba8BTOImK471AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/BY8uqh6 i6IwBhoyRUN7PsxSZw8wHwYDVR0jBBgwFoAUB3vNZjsOY7316bgJr3Gu8eWt9jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0Q0MUZBMzJDM0VF MzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlq cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQjN2Tlpqc09ZNzMxNmJnSnIzR3U4ZVd0OWpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MzA5L0Q0MUZBMzJDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTcz MTZiZ0pyM0d1OGVXdDlqcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKN/r9OQwVh84kKmPKeOqzDIQzffyfCEc+Iukk2Ixt9v9dshcAnJ+5xO BUqafoU+vB00+dz8Hgla0cEVjA5Rwa38unSMBbrCe1DSdMPHYXDlO0JEOGcCw/SF O82/U6KLRiZg62qTnuoVfHamWrFqvKGrrzzVxiNJV6WU0n3tGQrFMIGK64nlPpaj rQljynwgjlbSPI5opxQw9dS5HKC8dfDKYPBtVNTxYeTsLLy56nPYajR+GZyJsLec X0l8lWPWi9uAxAXoZ+RBbEi1eWaPQUG9TahIPTUdSOOW1wOO8uCap3hq+1JKAlp5 qkWizFS2eEO+oGmnrpBxOjPIls/r9ic= -----END CERTIFICATE-----Generated at Thu Jan 1 11:03:04 2026 by rpki-client